Does the feedback for a Code Review question have to be limited to the scope of the explicit code cited, or can we infer direction and context and comment on that also?
For example, in this answer, I attempt to dig a little deeper than just the code on screen. Is this appropriate? I kinda think it is, especially since the code in question is security related and us devs seem to get a bad wrap for screwing this kinda thing up.